[33467] in Kerberos
Re: [OpenAFS] Re: Help: Can OpenSSH get OpenAFS token after the
daemon@ATHENA.MIT.EDU (Russ Allbery)
Sat Jun 11 15:40:37 2011
From: Russ Allbery <rra@stanford.edu>
To: Booker Bense <bbense@slac.stanford.edu>
In-Reply-To: <alpine.LRH.2.00.1106110716160.24038@telemark.slac.stanford.edu>
(Booker Bense's message of "Sat, 11 Jun 2011 07:20:18 -0700 (PDT)")
Date: Sat, 11 Jun 2011 12:40:29 -0700
Message-ID: <87wrgsma1e.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: OpenAFS <openafs-info@openafs.org>, "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Booker Bense <bbense@slac.stanford.edu> writes:
> [1]- To be honest I've forgotten exactly what the combination was, but
> there was one edge case that I just couldn't get the pam based solution
> to work. The sshrc solution is also required on OS X.
I'd be really curious to get more details. (The solution to get
pam-afs-session working on Mac OS X is to add "nopag" to the PAM module
options. I'm considering making that the default on Mac OS X.)
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
